LEGALAUDIT

Scam Radar

How can you recognize Trenitalia Smishing: Fraudulent SMS Promises Compensation and Steals Payment Card Data?

Published

Listen to the episode

TLDR

CSIRT Italia has detected a new smishing campaign that exploits the Trenitalia brand to steal payment card data. The victim receives an SMS inviting them to claim a supposed compensation for a past trip, by clicking on a link that leads to...

How it works

CSIRT Italia has detected a new smishing campaign that exploits the Trenitalia brand to steal payment card data. The victim receives an SMS inviting them to claim a supposed compensation for a past trip, by clicking on a link that leads to...

Red flags

  • Urgent pressure to click, pay, or share codes immediately.
  • A link or sender that does not match the official organization.
  • Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.

What to do

  1. 1After entering the phone number and a fake refund amount, they are asked to fill in the credit card details and the OTP code received via SMS, under the pretext of a small "verification fee".
  2. 2An advance payment is requested ("verification fee") to unlock a phantom refund: no legitimate compensation requires card details or OTP.
  3. 3What to do: Never click on links received via SMS from unknown senders and immediately delete the message.

Source

csirt-italia

Source reviewed by Mythos Forensic Team

https://www.acn.gov.it/portale/w/campagna-di-smishing-a-tema-trenitalia

FAQ

Is Trenitalia Smishing: Fraudulent SMS Promises Compensation and Steals Payment Card Data a real scam pattern?

Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.

What are the first warning signs?

Urgent pressure to click, pay, or share codes immediately.; A link or sender that does not match the official organization.; Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.

What should I do first?

After entering the phone number and a fake refund amount, they are asked to fill in the credit card details and the OTP code received via SMS, under the pretext of a small "verification fee".; An advance payment is requested ("verification fee") to unlock a phantom refund: no legitimate compensation requires card details or OTP.; What to do: Never click on links received via SMS from unknown senders and immediately delete the message.

Can LegalAudit check my case?

Yes. Start a free chat and paste the message, link, sender, or payment details for triage.